hxxps://nctcecviuobmtvnlefef[.]supabase[.]co/storage/v1/object/public/uploads/7f779462-f341-41ea-93ba-25e60a9ecac8/

Analysis

user interaction
yes
max time kernel
108s
max time network
104s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 17:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://nctcecviuobmtvnlefef.supabase.co/storage/v1/object/public/uploads/7f779462-f341-41ea-93ba-25e60a9ecac8/
Sample260910-v8vdbswsct

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4972	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335356359233863"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{0D630249-9E7D-4794-B74B-9DE8D3B6ECA6}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 2184 wrote to memory of 1120	2184	msedge.exe	84
PID 2184 wrote to memory of 4972	2184	msedge.exe	85
PID 2184 wrote to memory of 3804	2184	msedge.exe	86
PID 2184 wrote to memory of 3804	2184	msedge.exe	86
PID 2184 wrote to memory of 3804	2184	msedge.exe	86
PID 2184 wrote to memory of 4488	2184	msedge.exe	87
PID 2184 wrote to memory of 4488	2184	msedge.exe	87
PID 2184 wrote to memory of 2996	2184	msedge.exe	88
PID 2184 wrote to memory of 4468	2184	msedge.exe	89
PID 2184 wrote to memory of 2996	2184	msedge.exe	88
PID 2184 wrote to memory of 2996	2184	msedge.exe	88
PID 2184 wrote to memory of 4468	2184	msedge.exe	89
PID 2184 wrote to memory of 4468	2184	msedge.exe	89
PID 2184 wrote to memory of 4740	2184	msedge.exe	91
PID 2184 wrote to memory of 1076	2184	msedge.exe	92
PID 2184 wrote to memory of 4740	2184	msedge.exe	91
PID 2184 wrote to memory of 4740	2184	msedge.exe	91
PID 2184 wrote to memory of 1076	2184	msedge.exe	92
PID 2184 wrote to memory of 1076	2184	msedge.exe	92
PID 2184 wrote to memory of 4900	2184	msedge.exe	96
PID 2184 wrote to memory of 4236	2184	msedge.exe	97
PID 2184 wrote to memory of 4900	2184	msedge.exe	96
PID 2184 wrote to memory of 4236	2184	msedge.exe	97
PID 2184 wrote to memory of 4056	2184	msedge.exe	99
PID 2184 wrote to memory of 3380	2184	msedge.exe	109
PID 2184 wrote to memory of 4552	2184	msedge.exe	110
PID 2184 wrote to memory of 1784	2184	msedge.exe	111
PID 2184 wrote to memory of 2396	2184	msedge.exe	112
PID 2184 wrote to memory of 2396	2184	msedge.exe	112
PID 2184 wrote to memory of 2396	2184	msedge.exe	112
PID 2184 wrote to memory of 2428	2184	msedge.exe	113
PID 2184 wrote to memory of 2428	2184	msedge.exe	113
PID 2184 wrote to memory of 2428	2184	msedge.exe	113
PID 2184 wrote to memory of 4832	2184	msedge.exe	114
PID 2184 wrote to memory of 4832	2184	msedge.exe	114
PID 2184 wrote to memory of 3052	2184	msedge.exe	116
PID 2184 wrote to memory of 3052	2184	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://nctcecviuobmtvnlefef.supabase.co/storage/v1/object/public/uploads/7f779462-f341-41ea-93ba-25e60a9ecac8/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff9e9a1c188,0x7ff9e9a1c194,0x7ff9e9a1c1a0
  2⤵
  PID:1120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,13130353712791164389,16076084984705222923,524288 --field-trial-handle=2312,i,8489171421149208627,5907395448721103795,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,13086143539911135614,10121429347745897537,262144 --field-trial-handle=2312,i,8489171421149208627,5907395448721103795,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:2
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2380,i,10334179695831211326,9598521559616871803,524288 --field-trial-handle=2312,i,8489171421149208627,5907395448721103795,262144 --variations-seed-version --mojo-platform-channel-handle=2384 /prefetch:8
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,8001873766269916846,292415563814611259,2097152 --field-trial-handle=2312,i,8489171421149208627,5907395448721103795,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,3724888385891681504,7630187213809139654,2097152 --field-trial-handle=2312,i,8489171421149208627,5907395448721103795,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4144,i,1054697780432920099,3839262816917746793,2097152 --field-trial-handle=2312,i,8489171421149208627,5907395448721103795,262144 --variations-seed-version --mojo-platform-channel-handle=4148 /prefetch:1
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4208,i,16342821252358328464,2151060787025739374,2097152 --field-trial-handle=2312,i,8489171421149208627,5907395448721103795,262144 --variations-seed-version --mojo-platform-channel-handle=4176 /prefetch:2
  2⤵
  PID:1076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5000,i,9457848023304435056,4384894531140867466,524288 --field-trial-handle=2312,i,8489171421149208627,5907395448721103795,262144 --variations-seed-version --mojo-platform-channel-handle=5040 /prefetch:8
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,4757836424477647895,5589544951511634726,524288 --field-trial-handle=2312,i,8489171421149208627,5907395448721103795,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:8
  2⤵
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5780,i,14446829956381266456,730813643447963951,524288 --field-trial-handle=2312,i,8489171421149208627,5907395448721103795,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:8
  2⤵
  PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5780,i,14446829956381266456,730813643447963951,524288 --field-trial-handle=2312,i,8489171421149208627,5907395448721103795,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:8
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4344,i,7566893892216215448,3014353624845829599,524288 --field-trial-handle=2312,i,8489171421149208627,5907395448721103795,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:8
  2⤵
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4328,i,7756210342734129231,7849099274930520837,524288 --field-trial-handle=2312,i,8489171421149208627,5907395448721103795,262144 --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:8
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4332,i,14469845561919567007,2499802635424097903,524288 --field-trial-handle=2312,i,8489171421149208627,5907395448721103795,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:8
  2⤵
  PID:1784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=5028,i,6360031004974644315,18089393477092231,2097152 --field-trial-handle=2312,i,8489171421149208627,5907395448721103795,262144 --variations-seed-version --mojo-platform-channel-handle=5596 /prefetch:1
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=3628,i,12848852118687579140,6666553129696854686,2097152 --field-trial-handle=2312,i,8489171421149208627,5907395448721103795,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2624,i,94783783237491558,7949747429389054869,524288 --field-trial-handle=2312,i,8489171421149208627,5907395448721103795,262144 --variations-seed-version --mojo-platform-channel-handle=6292 /prefetch:8
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5708,i,18314196398778852331,5269123437459942519,524288 --field-trial-handle=2312,i,8489171421149208627,5907395448721103795,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:8
  2⤵
  PID:3052

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4356

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 808672f14296b04df293c3e185a70b626c4f9187d586574837ffdcb84f0f83ed
MD5 99d365e71486a534b82180c5d6636c48
SHA1 815f2a2c6e02f3a3e4be1d48e83daed5a835def7
SHA512 66ca632e7baee0590eb9c37c4e509ee7e956b62e1c263a061700bb08942c34170fbd8a79b67dad2181a243235ae0462829561971a3fca809a755bf6414c31d49
TLSH
T104D02310B82CB7D2F123003D00304702344C8177B223B301B020040D8E300C3B2CA4E2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b976ac8901ffd41ec02a04aa583bc9d11350f0f9f714fb92d3341bb0bde4629f
MD5 504ce80b644a85a7e68d85bd24169289
SHA1 1f740a722dfa97fc8fb30626b0e3d6217e4a9864
SHA512 9406464a4f6becd85591c12af8a97fdecfa2208649138f347fb50d3e28f1583adec061050924fa0405e46eb75af7e299e6564c2ed039db9d82c50326da32a3c5
TLSH
T19ED08023371D7582F75B41759053D7025A1680756463F701B325D41C9A750C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1c1d56faa7cfdcd8ecf4e0e7e5c86cd00d60b23e9672d136722c638ba88f4c0d
MD5 abf78bfd5e68923c47d36a4d1817861a
SHA1 9b6c5e59ecbe343c0fec68d5714bdc0ba5b209bb
SHA512 5be8a08c8336002a43371a29fc3d3a53f617806ac20ea37b60671209486a90261e0571ed5a762010f9e6e9817894c6e6999028490031d19c6d243e6e148aef85
TLSH
T1F7710A3538F204E1E3B3493196D10B2676A28EEAF52B1FD10A2014F5B6113E24D5F779
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe584d9e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe584d9e.TMP
Size 3KB
SHA256 b70f6d93f32f41c90947209d193847c7a74aeb5e1abf251f98c8537bb9ed4dea
MD5 6d567233c44c0af3c221633e0703fac2
SHA1 c8e53e7af519140575e6c3b1c700fe8f09488b40
SHA512 35b8458c9b55491b70e8e9cd4b2eebac79a2ab8acd4a3d454b0c1c0e93f5419026a726a731bd90ccc7215808763f0e6033aea33b8207cc74b352e4083c884cf8
TLSH
T19B710A3539F204E0E3B3493196E10B2676A28EEAF52B1FD1092014F5B6113E24D5F779
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 1a25c2918f3962fcfa5639b444ed25fb5cbbb5e5cd2371f22bedc81efc627d34
MD5 2fe689211c25af3a78890d6f3850bf47
SHA1 4ffb049113fa8a5a2b7a811d10e469c4955b00cc
SHA512 6cb4428963ee68ebe9f35ca8cd215f81d57275d8d31d03a3b922b8c236850e054f45fb13fe973fe3faba6625193e3ea95c89314f1f0c80e29b33ac942ca7c6d4
SSDEEP 3:MsEllllkEthXllkl2zE2C:/M/xT02zI
TLSH
T1BF44040C7FC10C05CD001130C011C3700FF0D5300511D7D73C5155135CC75C00C00040
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 f00f9d2000640c0b4a75fbb493bf3c162094a638797b337e72375e755d97e1fd
MD5 279ac53a99a8ba3f79139f1ab07e2a6d
SHA1 54cd57fa8ec85ef63233d17e1f8f1013b677f3c0
SHA512 857914c929a6431f1986767fa146769ca959df6e4601dca07f81a653c0a93e7a093db034c10e9ce51fedf1acd356a462e76d753e6f0aaa75088437474674e82e
TLSH
T14B31E0F2C7E5856DC91216F05618AE1BCE1D051942687D09C5E8FF67A3E3470E10199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 da16c79e826dd117d3c500bee4162dd0853a1b5b99294ba96c73eb55eb28bc18
MD5 e4968cde22047fc2a092100aa7e687d7
SHA1 ce80eed8a59d39acc659fb2905d31beb97d026be
SHA512 acd7c0043a5f5bfd657887a39d6a84484c6a0aa9543ed5d3b9d41bb17a7d2295294890e24b3305c909f8d5ec6f0b2fa41cbdd16903ada6bcd1e87bb995a66969
TLSH
T16631E0F2C7E5856DC91216F05618AE1BCE1D051942687D09C5E8FF67A3E3470E10199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 30c4bfd4b3c7a1f78978e5d25dc495bdf95ef59b84b60d25ea1d10f958ae8524
MD5 ecdceedc5c494d02dc9912c9a0006e88
SHA1 fbd717266c35af42603a9255d4a0cb0217f2938e
SHA512 7e29336ea2edabd569bc560f8421b8e7bc42ff0b30b91f2752590c8355e057a48ec77555da5f9c72f56a0b3a970118659499bbae99476e9623b03440cc7e700e
SSDEEP 192:sxZhR9yM/jK1Ml8MWZ/ffsU2IdpJHW6+WNGYIwy8KIgrJ:sxZhluZ/ffsU3JHbG59
TLSH
T1BA42F8116B34697BCCDBD20DFA557F93D6F91472A2940E44A9FCCA1C04E6AEC220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 76de35fe679c394efa62bb92b4900dda48feb602023e2c1534a538e25e17c9de
MD5 6572aa5849cea968a068c405eaedc27e
SHA1 89ad45ec2469c9fa87b92b97d83a4781d1fd6c1c
SHA512 d61c553ce7086d3da3e76f1ff4fab9cbe7b52e2333fd4354f2d165e12b71a0c03f19a3326019f16713649a93a010f1cc0a6be3aaf393d0c14c221fc27d2a2d6d
SSDEEP 192:sxZhR9yM/jK1Ml8zWZ/ffsiWpVa3IdpfhloHW6+WNtigYFNXYAzs5sIgbKJ:sxZh3ZZ/ffsiWvaY0Hb0Xpy
TLSH
T11452E716AA34597BCCD7D20CFA557FA3D6F95472A2940E8499FCCA1C01E6BEC220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 549f2e55d8877b5a50717252a6bc1be41d403ae0ba34b576cf51e336ff70c5da
MD5 a3cc0814085bbe8a7506c5698b3adab2
SHA1 42c63f935ed4349c9b8e6ad9abc3c390d76e9889
SHA512 b5ac79934230af4c5479a0a48c1744f5c1728055ce04f092f7d8576b0e201edbc5f2e2e590c685335a7d3515f393dbb43ae57d0f9aba39b52e3350fcf4e857ec
SSDEEP 192:sxZhR9yM/jK1Ml8MWZ/ffsS3IdpthloHW6+WNtY/r/YI328KIg5KJ:sxZh3uZ/ffsSY6HbG/eE
TLSH
T19952E7126A346977CCDBD20CF9457F93E6F55472A2940E8499FCDA1C04E6ADC220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 d4727d2932d18be238ba2bd19810f939db2da7e591aae3d18b9535d16ae6c523
MD5 58f7fa996fa5f4925716a1e977a03f9b
SHA1 a2e1a0ee4b9eccf4530a2351a7ca683bfd6081d8
SHA512 597af02a720dd2b48c14ecaac10f64e03d243bbd4e038edc3f76d1f4dfdc11811260260bf1d69ce4730c168ff5a8b7ab68ae170503ec7997f4331092d8726ab8
SSDEEP 768:zbsqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9Qro/sE:zbsqxXlWvJD6Tu1ja54LAs97/5
TLSH
T1AFD20B3B694CC77E4F840E9DEC266FD76ED801CBA6988D5447FA880C03CB2EA51165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 8988e43adc35dc01c8dc68d37da751970837f027d192935eeb69fe33d079a4d3
MD5 e54e9456e539023f5f52be2ee9a65089
SHA1 40fcb623e628279735b89b8a27eaf79562dcac61
SHA512 e0ad59af6775871b3d25c3c29179e1e649f28b76c06080992580af95d67995f49be4bcc73afd37dd4a016a0e3bd906ce1fab504930d1657ff5158588ca6ffd59
SSDEEP 48:KPYNs4iCiac6vpI9IaKGveOaS4K7H2oTyNvItKE0o/yFjIhKQgEA101F1K1+1E1T:KYbaKYIKmveKE0i2jaKQgZgL2qQ6+vz
TLSH
T1D1911A16317B02417CBE295CA1A6963BCE4232733518A86F3F7451B24D97E221DFC9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe58e913.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe58e913.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 c1ea701ed902adbabaa1be8740c37c6bbfff3161137f5b1755d6e888cacec066
MD5 efb73a12e5ca3d7c2c61a4edfce55a7a
SHA1 8d1daafe6ee041643ecc39e06b967e1d5a13420e
SHA512 cc1c0b0405515deb49ce51d5a97d33f7a21021f8308e04b3dbdf11b9a22f84f88a1fa1e06f85cb9995f1538bd1d97ce93213b44b907c928f288cbfe7410814f1
SSDEEP 384:lZcIhsNs6h3bUi6WVRNQOxM9LlGxuvzxV+Mhdp/B/oN:dhvt0HQOW9LE4184p/pa
TLSH
T10B826D716C386D7B5DEBA185F98B37034EB89077A6C86F80D0ED6F1D01D7699031AC29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 e5b6497eb761bfa5eec005ff10d34f0d72e2868180e0cfad350a0599e89e90fd
MD5 bdcfcec8c9263291842a1b4e83779eca
SHA1 9a55e329e0f9228eb277c8abe19ea528b9d9dcd9
SHA512 1cc55f9909abe2caee7546f2d3219f7ce212447d692f8480066b88f8c2fbd6e753ba9b4d4e3fb277f26c7350940f43183e4e871c275c2183ce9c588ee58c6868
SSDEEP 384:SiFiZcIksNk8TUNTUlIlTh3bUiXWVRNQOxM98lGxuvzxV+Mhdp/B/oN:ZFQkNwgsg0HQOW98E4184p/pa
TLSH
T1B1C22AF258D74D7AD9AE9743A77E2E034EBCC067B5846A40B3985A1CCD871BFC30A815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 59eebe1b23b68fd78af4c6fbc4e099766bc72c29efdb9efe33c468b866851f9e
MD5 6c10c38b2a5cf831ea7f344c11e5aa10
SHA1 8cead060443346dbddcd5e278d31cae039bb51d5
SHA512 9dc488625d83c215fddb8ad723fd9ff9c7092c3642b104d515b47eaf37a207069b8ebea3291244147c22a4a3dc13e826f9b0da91cd509eb93fdee2d3aa8ec3f6
SSDEEP 768:ZFQkpwgs50HQOW9aOShrK+Y4Mkt4184p/pa:IkEFGrK+dNtbipa
TLSH
T1A8E26DF188D75CBAC89E97C79B7EAD0259BCC033B5889548B3A8652DEC4B5BFC315810
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 cfae658e49318a0c1a1e51e13af0d7234fe816f4d1cd40992274b6e249e4b792
MD5 758ce891793ea8dff9f701e3215abc17
SHA1 5dd83886833f41c8e03e40545aaa3a57b9104a4c
SHA512 64ebefea10a990ec836ae3136cabf916d5bcba7c8b4aa0c0806f752819845b597b126b534ed5130967f3cb050d023dda62cabc0a1bf21d75b9ca2c25b2070920
SSDEEP 384:cZcIhsNsTh3bUi6WVRNQOxM9LlGxuvzxV+Mhdp/B/oN:Kh2t0HQOW9LE4184p/pa
TLSH
T19A826D716C386D7B5DEBA185F98B37034EB89077A6CC6F8091ED6F1D01D7698031AC29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 73c167aa74dbb0174ab5766b2f679c59934a03297ebf607048367819150e1658
MD5 b33a9fcab0ebec134f68f0a1fd45799c
SHA1 541a415efe4f39c08c8aa59e947cf76c2e366934
SHA512 d758135d124278acbbaa733d4e85791ffec1b5673ff46f9f11a4fc1decfee80b7a91cbedf49e0a4422053a7c32168e934ab18fcc1f6b9631640ca570bbd475f6
SSDEEP 192:tON86JkRtQmiUyiYW+RNQOmyOmWh3URYU6:tON86UriW+RNQOxK3U6
TLSH
T15B02E835AC386C7B9EF3AD49F98B27175FA4203BA9552F80DAD81B1C01D765C2347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0cd0b498e6d839f739c13659a936947853871f254fcd9b1388863da44dbdfc65
MD5 31cfb82c2bb04dc53d54eae9dd37e67c
SHA1 7ce9a5516081a7e83168918e5a8dc54fdc36f6cf
SHA512 3325b51f2d83a535556ce5b33f7f5fbb2099c38ebbada3cd7bc0cb436795909393841d8052980a3cf9556dffe5e9ab2ff1a3bc324ef923cf15e6a3b33f5cce1c
SSDEEP 192:7ON96JkRoQmiUy3YC+RNQOmyOmHA9zqVc5qC6Z9U6:7ON96UIRC+RNQOxM9BlGU6
TLSH
T115120A316C386C7B5EE36885F48736134FB8613BEA897F80D1DC2E1C01DBA9C134A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9fdbaab9-988b-41f5-9bf9-a316108aca03.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9fdbaab9-988b-41f5-9bf9-a316108aca03.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 bbd52b2e837685831105189802498b6bb0fa728b43f3ee8916278c49022aaf49
MD5 80de06990ca338f01b799d603cce6b65
SHA1 7341ae4fe9217fe35e1f05d3248688a0d8207044
SHA512 f430b9977f9df7756056c4d39a519a896af3b1c41f77c7f38cac66b667fe1f78946c3fbf4dbf4bbbe1bb3204efc44037d2f29cf3b16c1cc1d64e633fbfe36588
TLSH
T147412758B6FA1148B3B76F1A9BF6B86D487F7D772E0AD09D10110E4F0627A40C8A1B33
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads